$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa File: 30C9CCC6AA7711EF87AB7648C4F9AE02.roa (raw, json) Hash identifier: 9a/Xf144BGTz9lOQV2iGyEyfB/0EaARDTCMaH2wHCnE= Subject key identifier: 0B:EA:4E:C0:46:58:EF:49:46:12:63:33:8E:97:90:20:08:6A:30:22 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1316 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa Signing time: Sun 24 Nov 2024 15:17:17 +0000 ROA not before: Sun 24 Nov 2024 15:17:17 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 141342 IP address blocks: 103.120.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4886 (0x1316) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD Validity Not Before: Nov 24 15:17:17 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6743437d-750a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:e4:85:b1:02:74:7a:3d:9e:31:a6:fd:4e: 62:ef:90:c6:90:5e:9c:2f:97:51:61:0c:69:f4:d4: 5f:e1:34:2f:06:e6:ef:54:0e:44:0d:f7:1d:bd:56: 7e:3e:54:b9:42:4e:41:e6:b1:d4:48:0d:2e:fb:6e: ff:85:ab:36:fe:3b:25:0d:d6:fd:67:6b:c0:99:c9: 53:d9:ea:02:36:4d:f3:52:f8:f3:9f:9a:84:e0:be: de:bf:aa:5f:44:9d:32:b1:ed:ca:e4:f9:28:a3:02: 61:94:b6:27:ce:0d:ec:8e:f2:a9:2e:01:60:90:50: 1b:73:06:f5:21:ae:fc:71:d8:4c:a6:52:e8:80:a8: b8:0f:6c:41:2a:02:4e:3a:32:94:15:8d:a6:c0:86: 34:2b:62:d9:8a:25:37:8a:c6:72:2f:9f:d3:13:b8: 14:47:e2:d2:e4:0b:0d:14:86:52:c8:8e:63:75:ce: 8d:ce:1d:9c:c6:44:1e:81:db:00:34:1a:99:97:9c: 02:d0:bf:12:0e:16:d8:61:43:47:2e:f4:53:42:d7: c5:34:d8:df:1e:14:a2:5f:f1:7b:d7:ae:da:b9:49: 44:f8:5b:9a:bf:95:72:8f:87:ac:97:80:c0:1d:d0: 1b:7d:33:39:35:84:1c:70:56:2b:03:cf:7b:82:be: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EA:4E:C0:46:58:EF:49:46:12:63:33:8E:97:90:20:08:6A:30:22 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/30C9CCC6AA7711EF87AB7648C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.116.0/24 Signature Algorithm: sha256WithRSAEncryption 81:dd:d0:e5:53:e4:fd:ed:f3:c7:fa:c9:1a:e2:09:8f:f0:95: 90:d6:24:cf:87:8f:48:7e:24:60:df:d8:d4:6d:6a:ec:a5:e3: a7:70:99:54:de:85:1a:d5:bb:c2:ec:76:11:05:38:8f:0b:e0: f4:70:0b:12:16:db:84:5e:3e:8d:9c:10:cd:af:46:f8:2f:36: 14:e2:4a:a7:a5:89:ed:34:7f:26:a2:54:10:82:f3:c4:ff:d7: 1a:84:45:42:03:8a:33:02:38:74:01:a4:23:5e:c3:14:76:88: 7f:9c:9c:48:3d:8e:44:ec:f3:a7:cb:42:a5:29:14:fe:3a:f5: 91:78:fa:aa:b9:60:08:8f:19:e2:e8:a2:a1:df:83:0e:1d:0b: e0:32:ac:00:61:e9:ef:d6:b5:64:cf:cf:22:0f:a0:68:a9:00: 95:0a:0e:5f:7f:3d:50:2c:cd:36:ee:41:9f:11:d7:72:15:ed: 8a:ef:d6:73:91:9c:78:0f:ef:8a:e6:de:ce:d8:df:f2:b4:cf: 90:60:ab:ac:3d:e9:56:19:ca:c4:fb:4b:2e:a6:09:45:cc:88: b8:34:25:35:b3:8e:84:72:ee:da:36:7e:90:93:0e:cd:2c:98: d3:cd:10:ac:ee:22:e8:35:e4:54:58:86:b5:ec:40:f8:d9:25: 6a:da:2a:5f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICExYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjQxMTI0MTUxNzE3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQzNDM3ZC03NTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZTkhbECdHo9njGm/U5i75DGkF6cL5dRYQxp9NRf4TQvBubvVA5EDfcdvVZ+ PlS5Qk5B5rHUSA0u+27/has2/jslDdb9Z2vAmclT2eoCNk3zUvjzn5qE4L7ev6pf RJ0yse3K5PkoowJhlLYnzg3sjvKpLgFgkFAbcwb1Ia78cdhMplLogKi4D2xBKgJO OjKUFY2mwIY0K2LZiiU3isZyL5/TE7gUR+LS5AsNFIZSyI5jdc6Nzh2cxkQegdsA NBqZl5wC0L8SDhbYYUNHLvRTQtfFNNjfHhSiX/F7167auUlE+Fuav5Vyj4esl4DA HdAbfTM5NYQccFYrA897gr5HewIDAQABo4IClTCCApEwHQYDVR0OBBYEFAvqTsBG WO9JRhJjM46XkCAIajAiMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODA5QUQvNjU2REQyNkFBNzY4MTFFODkzMzNDNzI1QzRGOUFFMDIvMzBDOUNDQzZB QTc3MTFFRjg3QUI3NjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneHQwDQYJKoZIhvcNAQELBQADggEBAIHd0OVT5P3t88f6 yRriCY/wlZDWJM+Hj0h+JGDf2NRtauyl46dwmVTehRrVu8LsdhEFOI8L4PRwCxIW 24RePo2cEM2vRvgvNhTiSqelie00fyaiVBCC88T/1xqERUIDijMCOHQBpCNewxR2 iH+cnEg9jkTs86fLQqUpFP469ZF4+qq5YAiPGeLooqHfgw4dC+AyrABh6e/WtWTP zyIPoGipAJUKDl9/PVAszTbuQZ8R13IV7Yrv1nORnHgP74rm3s7Y3/K0z5Bgq6w9 6VYZysT7Sy6mCUXMiLg0JTWzjoRy7to2fpCTDs0smNPNEKzuIug15FRYhrXsQPjZ JWraKl8= -----END CERTIFICATE-----Generated at Sun Apr 6 01:49:25 2025 by rpki-client